1 # change log
2 
3 ## 2022/03/26 - 1.8.2 “Lightbulb Sun” bugfix release
4 
5 ### Bug fixes
6 
7 * fix a CGI timing issue: if a connection handled by a CGI scripts is interrupted with the right timing it causes the server process to exit with "fatal in client_by_id: invalid id X".
8 
9 ### New Features
10 
11 * add a new block `type { ... }' to define mime types mapping.
12 
13 ### Improvements
14 
15 * use shell built-in `command' instead of which(1), prodded by cage and Allen Sobot.
16 * configure script: allow to set MANDIR from cmdline (Allen Sobot)
17 * add systemd-sysusers sample file in contrib/ (Nakaya)
18 * [linux/seccomp] allow fstatat64(2), llseek(2) and sigreturn(2), needed by glibc on armv7.  (Tobias Berger)
19 * [linux/seccomp] tightens rules by allowing openat(2) only with the O_RDONLY flag.
20 
21 
22 ## 2022/02/10 - 1.8.1 “Lightbulb Sun” bugfix release
23 
24 ### Bug fixes
25 
26 * fix landlock usage on linux: don't assume that access capabilities not listed are implicitly denied, because they are not.  Mickaël Salaün, the landlock author, found the same error on game of trees:
27 
28 > In a nutshell, the ruleset's handled_access_fs is required for backward and forward compatibility (i.e. the kernel and user space may not know each other's supported restrictions), hence the need to be explicit about the denied-by-default access rights.
29 
30 In practice this affects only linux and only partially: thanks to the design of the daemon and the seccomp filter the effects of this mistake in handling landlock are fortunately limited.  However, in theory at least, gmid could be for e.g. tricked into truncating existing files, so it's highly suggested to update.
31 
32 ## Improvements
33 
34 All by Anna “CyberTailor”, thanks!
35 
36 * don't skip unit tests when SKIP_RUNTIME_TEST is set
37 * add `gg' to the regress target dependencies
38 * fix the "implicit declaration of asprintf" warning
39 * sync vim syntax
40 
41 
42 ## 2022/01/30 - 1.8 “Lightbulb Sun”
43 
44 ### New Features
45 
46 * reverse proxying support: gmid now can relay gemini requests to other hosts.
47 * install gg too: it's a simple gemini client ("gemini get") initially developed as part of the regression suite.
48 * added OCSP stapling support (by @The-King-of-Toasters, thanks!)
49 * add gencert, a simple script to generate self-signed certs.
50 * add renew-certs, a script to automatically renew self-signed certs.
51 * multiple -n partially dump the parsed configuration.
52 
53 ### Improvements
54 
55 * reworked the fastcgi subsystem, now it's completely asynchronous.
56 * refactored the internal of the server too.
57 * refactored the regression suite (in particular reduced the timeout for single tests from 30 to 10 seconds.)
58 * configure: add support for --prefix=... autoconf-style flag.
59 * relax the "wont proxy" check: don't check that the port in the request is the same we're listening on.  Suggested and discussed with Allen Sobot, thanks!
60 * relax the strict ordering of options, locations and proxy blocks inside a server block.
61 
62 ### Bug fixes
63 
64 * don't pass through illegal replies from CGI scripts.
65 * fix the "double slash" error in logs.
66 * fix the configure for cross-compilation: don't run the test binaries just built.  Suggested by Nikolay Korotkiy (@sikmir), thanks!
67 * (seccomp) allow ugetrlimit(2), needed by glibc on arm7l.  By Max, thanks!
68 
69 
70 ## 2021/10/15 - 1.7.5 “Space-dye Vest” fifth bugfix release
71 
72 This version includes the following bugfix
73 
74 * don’t die when a connection is closed before being accepted by gmid (i.e. handle ‘ECONNRESET’)
75 
76 
77 ## 2021/09/24 - 1.7.4 “Space-dye Vest” fourth bugfix release
78 
79 This version includes the following bugfix:
80 
81 * fix a possible out-of-bound access when handling a request for a non-existent file in the root directory of a vhost that's matched by the cgi option
82 
83 and the relative regression test.
84 
85 
86 ## 2021/09/19 - 1.7.3 “Space-dye Vest” third bugfix release
87 
88 ### Improvements
89 
90 * follows symlinks
91 * improved documentation and added key generation example (thanks! Anna)
92 
93 ### Bugfix
94 
95 * fix syslog logging on FreeBSD.  Reported by Karl Jeacle, thanks!
96 * don't crash if ``-c'' is missing in configtest mode (-n).  Reported by heph, thanks!
97 * allow fstat64 on linux (needed by glibc on aarch64).  Reported by pine, thanks!
98 
99 
100 ## 2021/07/19 - 1.7.2 “Space-dye Vest” second bugfix release
101 
102 This version incudes the following bugfix:
103 
104 * an un-initialized field in the configless code path leads to a crash on the first request.
105 
106 and the relative regression test.
107 
108 
109 ## 2021/07/11 - 1.7.1 “Space-dye Vest” bugfix release
110 
111 This version includes two bugfixes:
112 * use ${MAKE} to recursively call make.
113 * fix the misleading example in the manpage: macros may not be reserved words
114 
115 
116 ## 2021/07/10 - 1.7 “Space-dye Vest”
117 
118 Starting from this version gmid doesn't depend on lex anymore, but yacc is still needed.
119 
120 ### New features
121 
122 * initial fastcgi support!  (it's still young!)
123 * added user-defined macros, either via ‘-Dname=val’ or directly in the configuration file.
124 * new ‘include’ keyword to load additional configuration files.
125 * new ‘env’ rule to define environment vars for CGI scripts.
126 * new ‘alias’ rule to define hostname aliases for a server.
127 * allow ‘root’ to be specified per-location block.
128 * pidfile support with the new ‘-P’ cli flag.
129 * define ‘TLS_VERSION’, ‘TLS_CIPHER’ and ‘TLS_CIPHER_STRENGTH’ for CGI scripts.
130 
131 ### Improvements
132 
133 * remove limits on the number of virtual hosts and location blocks that can be defined.
134 * print the datetime when logging to stderr.
135 * use ‘text/x-patch’ for ‘.patch’ and ‘.diff’ files.
136 * sort the auto index alphabetically.
137 * various improvements to the log management.
138 * drop the dependency on lex.
139 * added ‘--help’ as synonym of ‘-h’ and ‘-V’/‘--version‘ to print the version.
140 * c-like handling of strings in the configuration file: when two or more strings are next to each-others, are automatically joined into a single string.  This is particularly useful with $-macros.
141 
142 ### Bug fixes
143 
144 * correctly handle CGI scripts that replies with the maxium header length allowed.
145 * fixed the static target.
146 * fixed recursive mkdirs for configless mode (i.e. create ‘~/.local/share/gmid’)
147 * logs sent to syslog now have proper priority (before every message ended up as LOG_CRIT).  Found by Anna “CyberTailor”, thanks!
148 * ensure ‘%p’ (path) is always absolute in ‘block return’ rules.
149 * fix automatic certificate generation, it caused problems on some adroid devices.  Found by Gnuserland, thanks!
150 * document the ‘log’ rule.
151 * the seccomp filter was reworked and now it's known to work properly on a vast range of architectures (to be more specific: all the architectures supported by alpine linux), see github issue #4.  Prompted and tested by @begss, thanks!
152 * various improvements to the configure script, notified and fixed by Anna “CyberTailor”, thanks!
153 * added a timeout to the regression tests.
154 
155 ### Breaking changes
156 
157 * if duplicate rules are found in the configuration file, an error is now raised instead of silently using only the last value.
158 * (sort of) ‘gg’ moved to ‘regress’ as it's only used in the regression suite.
159 * (notice) the “mime "mime-type" "extension"” rule was deprecated and replaced by the new “map "mime-type" to-ext "extension"”.  The ‘mime’ rule will be removed in a future version because its syntax is incompatible with the new string auto-concat mechanism.